CVE-2026-76460 Advisory
Severity: CRITICAL (CVSS 10.0)
KEV Status: Known Exploited Vulnerability (CISA catalog)
Affected Product:
- Cisco Identity Services Engine (ISE)
Vulnerability Description: Insufficient authentication control on an API endpoint allows unauthenticated, remote attackers to bypass authentication and gain unauthorized access to the web-based management interface via crafted API requests.
Remediation: Refer to Cisco Security Advisory cisco-sa-ISE-ABP-VNSW7Tn5 for patched versions and mitigation steps.
Action Required: Prioritize patching. This vulnerability is actively exploited and allows complete bypass of authentication controls.